aboutsummaryrefslogtreecommitdiffhomepage
path: root/internal/app
AgeCommit message (Expand)Author
2025-01-21state: store config in separate gob streamOphestra
2025-01-20fst: include syscall filter configurationOphestra
2025-01-19helper/bwrap: move sync to helper stateOphestra
2025-01-19proc/priv/shim: remove unnecessary stateOphestra
2025-01-17proc/priv/shim: merge shim into main programOphestra
2025-01-15app: expose single run methodOphestra
2025-01-15fst: hide sockets exposed via FilesystemOphestra
2024-12-31update reverse-DNS style identifiersOphestra
2024-12-28cmd/fshim: ensure data directoryOphestra
2024-12-28app: ensure extra pathsOphestra
2024-12-28app: extra acl entries from configurationOphestra
2024-12-28app: merge share methodsOphestra
2024-12-22app: mount /dev/kvm in permissive defaultsOphestra
2024-12-21app: rename /fortify to /.fortifyOphestra
2024-12-21app: do not fail on missing cookieOphestra
2024-12-20migrate to git.gensokyo.uk/security/fortifyOphestra Umiker
2024-12-19state: expose aids and use instance id as keyOphestra Umiker
2024-12-18cmd/fshim: switch to setup pipeOphestra Umiker
2024-12-18fst: rename from fipcOphestra Umiker
2024-12-18fipc: export config structOphestra Umiker
2024-12-06app: integrate security-context-v1Ophestra Umiker
2024-11-21app: add nixos-based config test caseOphestra Umiker
2024-11-19app: validate usernameOphestra Umiker
2024-11-18cmd/fshim/ipc: install signal handler on shim startOphestra Umiker
2024-11-18app: alternative inner home pathOphestra Umiker
2024-11-17app/start: check for cleanup and abort conditionOphestra Umiker
2024-11-17app: append # for ChangeHosts message with numerical uidOphestra Umiker
2024-11-16app: integrate fsuOphestra Umiker
2024-11-09app/config: rename map_real_uid from use_real_uidOphestra Umiker
2024-11-06app: support full /dev accessOphestra Umiker
2024-11-04linux: provide access to stdoutOphestra Umiker
2024-11-04app: separate auto etc from permissive defaultsOphestra Umiker
2024-11-04app/config: UseRealUID as true in templateOphestra Umiker
2024-11-04app: support mapping target uid as privileged uid in sandboxOphestra Umiker
2024-11-04app: format mapped uid instead of real uidOphestra Umiker
2024-11-03system/dbus: buffer xdg-dbus-proxy messagesOphestra Umiker
2024-11-02cmd: shim and init into separate binariesOphestra Umiker
2024-10-28app/start: skip cleanup if shim is nilOphestra Umiker
2024-10-28shim: expose checkPid in constructorOphestra Umiker
2024-10-27system/dbus: compare sealed value by stringOphestra Umiker
2024-10-27system: move sd_booted implementation to os abstractionOphestra Umiker
2024-10-27shim: user switcher process management structOphestra Umiker
2024-10-25app: separate nixos test cases from testsOphestra Umiker
2024-10-25app: test app permissive defaults sealing behaviourOphestra Umiker
2024-10-25app/start: cleaner command not found messageOphestra Umiker
2024-10-25app/seal: symlink /etc entries in permissive defaultOphestra Umiker
2024-10-25app/config: support creating symlinks within sandboxOphestra Umiker
2024-10-25shim: kill shim if setup becomes impossibleOphestra Umiker
2024-10-23internal: wrap calls to os standard library functionsOphestra Umiker
2024-10-21shim: abort setup on failed start and process exitOphestra Umiker
generated by cgit v1.3.1 (git 2.54.0) at 2026-08-30 13:47:04 +0000